_content/doc/security/fips140: update status of v1.0.0 and add v1.26.0

Change-Id: Ib3a64559632bef2e49b8aa94601c7a5c6a6a6964
Reviewed-on: https://go-review.googlesource.com/c/website/+/745921
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Mark Freeman <markfreeman@google.com>
diff --git a/_content/doc/security/fips140.md b/_content/doc/security/fips140.md
index 48209cb..885a85a 100644
--- a/_content/doc/security/fips140.md
+++ b/_content/doc/security/fips140.md
@@ -96,6 +96,9 @@
  - `v1.0.0` uses Go Cryptographic Module version v1.0.0, frozen in early 2025
    and first shipped with Go 1.24. It enables FIPS 140-3 mode by default.
 
+ - `v1.26.0` uses Go Cryptographic Module version v1.26.0, frozen in early 2026
+   and first shipped with Go 1.26. It enables FIPS 140-3 mode by default.
+
 ## Module Validations
 
 Google currently has a contractual relationship with [Geomys](https://geomys.org/)
@@ -120,13 +123,13 @@
 
 List of module versions which are currently in the [CMVP Modules In Process List](https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list):
 
-* v1.0.0 ([CAVP Certificate A6650](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=39260)), Review Pending, available in Go 1.24+
+* v1.0.0 ([CAVP Certificate A6650](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=39260)), In Review, available in Go 1.24+
 
 ### Implementation Under Test Module Versions
 
 List of module versions which are currently in the [CMVP Implementation Under Test List](https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/iut-list):
 
-_There are currently no module versions under test._
+* v1.26.0, available in Go 1.26+
 
 ## Go+BoringCrypto